Vendors · university of washington · wu-ftpd
Total
2
Critical
0
High
0
Medium
0
CISA KEV
0
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.